{"action":"created","issue":{"url":"https://api.github.com/repos/facebook/osquery/issues/2995","repository_url":"https://api.github.com/repos/facebook/osquery","labels_url":"https://api.github.com/repos/facebook/osquery/issues/2995/labels{/name}","comments_url":"https://api.github.com/repos/facebook/osquery/issues/2995/comments","events_url":"https://api.github.com/repos/facebook/osquery/issues/2995/events","html_url":"https://github.com/facebook/osquery/pull/2995","id":206937880,"number":2995,"title":"Bro integration","user":{"login":"iBigQ","id":6987420,"avatar_url":"https://avatars0.githubusercontent.com/u/6987420?v=3","gravatar_id":"","url":"https://api.github.com/users/iBigQ","html_url":"https://github.com/iBigQ","followers_url":"https://api.github.com/users/iBigQ/followers","following_url":"https://api.github.com/users/iBigQ/following{/other_user}","gists_url":"https://api.github.com/users/iBigQ/gists{/gist_id}","starred_url":"https://api.github.com/users/iBigQ/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iBigQ/subscriptions","organizations_url":"https://api.github.com/users/iBigQ/orgs","repos_url":"https://api.github.com/users/iBigQ/repos","events_url":"https://api.github.com/users/iBigQ/events{/privacy}","received_events_url":"https://api.github.com/users/iBigQ/received_events","type":"User","site_admin":false},"labels":[{"id":196858822,"url":"https://api.github.com/repos/facebook/osquery/labels/CLA%20Signed","name":"CLA Signed","color":"009900","default":false},{"id":117911473,"url":"https://api.github.com/repos/facebook/osquery/labels/feature","name":"feature","color":"bfe5bf","default":false},{"id":119503218,"url":"https://api.github.com/repos/facebook/osquery/labels/in%20progress","name":"in progress","color":"f7c6c7","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":154,"created_at":"2017-02-11T00:07:41Z","updated_at":"2017-06-19T16:16:25Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/facebook/osquery/pulls/2995","html_url":"https://github.com/facebook/osquery/pull/2995","diff_url":"https://github.com/facebook/osquery/pull/2995.diff","patch_url":"https://github.com/facebook/osquery/pull/2995.patch"},"body":"Bro integration for osquery. This adds an InternalRunner to the osquery daemon for communication with Bro. This Runner can update the daemon schedule on behalf of Bro. Also, this integration provides a logger plugin that sends query results to Bro. For more information, please refer to this [repository](https://github.com/bro/bro-osquery) for this [presentation](https://www.bro.org//bro4pros2017/Haas_OSquery_Bro4Pros2017.pdf).\r\n\r\nBro integration can be activated by the command line flag --disable-bro=false. There are basically no changes to osquery except starting the Bro Runner and registering the bro logger.\r\n\r\nPlease note, the code was checked for functional working only. Currently, there are NO unit tests and no memory leak detection. I would appreciate help for writing tests and check for code performance. \r\n\r\nSince this an early pull request, I dont expect this to be merged right now. Instead, I would like to get your feedback and help at an early stage."},"comment":{"url":"https://api.github.com/repos/facebook/osquery/issues/comments/309490218","html_url":"https://github.com/facebook/osquery/pull/2995#issuecomment-309490218","issue_url":"https://api.github.com/repos/facebook/osquery/issues/2995","id":309490218,"user":{"login":"osqueryer","id":9722826,"avatar_url":"https://avatars3.githubusercontent.com/u/9722826?v=3","gravatar_id":"","url":"https://api.github.com/users/osqueryer","html_url":"https://github.com/osqueryer","followers_url":"https://api.github.com/users/osqueryer/followers","following_url":"https://api.github.com/users/osqueryer/following{/other_user}","gists_url":"https://api.github.com/users/osqueryer/gists{/gist_id}","starred_url":"https://api.github.com/users/osqueryer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/osqueryer/subscriptions","organizations_url":"https://api.github.com/users/osqueryer/orgs","repos_url":"https://api.github.com/users/osqueryer/repos","events_url":"https://api.github.com/users/osqueryer/events{/privacy}","received_events_url":"https://api.github.com/users/osqueryer/received_events","type":"User","site_admin":false},"created_at":"2017-06-19T16:16:25Z","updated_at":"2017-06-19T16:16:25Z","body":":-1: The commit 77f72bf1d6a1ca3d63492003371c8fdd5f11e86c (Job results: [125](https://jenkins.osquery.io/job/osqueryPullRequestLinux/125/)) failed one or more tests (**FreeBSD**).\n"}}
{"actor":{"display_login":"osqueryer"}}